avoid private ports